Static task
static1
Behavioral task
behavioral1
Sample
5d09c3fb2b1b43b255295500b42382a3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5d09c3fb2b1b43b255295500b42382a3_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
5d09c3fb2b1b43b255295500b42382a3_JaffaCakes118
-
Size
88KB
-
MD5
5d09c3fb2b1b43b255295500b42382a3
-
SHA1
1350e957631cdf7efde2d532670e164b03478ea8
-
SHA256
a5c1d53222c44adc8314ae050d71d0bdbb46b39cc3eb1846617bdd3975bb9797
-
SHA512
46df58888a333dd5ded027b2c1d8b171dbab38ada8d0906ff2b50fbaed2268a9110440d69b50ab7749bdb1abc8e28d19b9d07f18189d0df42129d9cca913e71e
-
SSDEEP
1536:LJalpVQycJYznKD5LIsA4QbHV8pQhDHbKSItPzr6OTv2Lan:LOzQy/KD5LIsO18KbPItrrzTvZn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d09c3fb2b1b43b255295500b42382a3_JaffaCakes118
Files
-
5d09c3fb2b1b43b255295500b42382a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE